Security & privacy

How your data is held

Plain statements, each one true of the product today. When something changes, this page changes with it.

Where the data lives

MisGenie runs on a hosted PostgreSQL database (Supabase) in the United States, region us-west-1. Your records are held there and nowhere else. Backups are the host's daily backups.

Encryption

Every connection uses TLS. Data at rest is encrypted by the host. Passwords are never stored in a readable form; sign-in is handled by the host's authentication service.

One company, one schema

Each company's data lives in its own database schema. A membership rule on every table means a signed-in person can read nothing outside the company they belong to, and an anonymous caller can read nothing at all.

Who can see a salary

Database rules, not just screens, decide who sees pay: an employee sees only their own salary, pay components, advances, claims and bank details; HR and Admin see everyone's. The same rule covers the company's bank accounts.

What stays on your computer

The compute is cloud-less, the record of truth is not. Payroll is calculated in the desktop app on your machine; CVs and ID-card scans are read on your machine and only the result is saved; payslip PDFs are generated on the device that asks for them. The records themselves are held in the hosted database above.

Testing

We test the web app, the API surface and the server functions ourselves, and every release is blocked unless the payroll and tenant-isolation test suites pass on a sandbox copy. No external firm has tested the product yet, so no test date is shown here; no certification is held or claimed.

Telling us about a problem

Write to support@misgenie.com. Security reports are read by the engineering lead within one working day.